This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/04535a-4c08-4dc9-97b1-dd4aff360a11/1/ZIPWjECz28KafUdyeRpTjD7uIDI.mft File: ZIPWjECz28KafUdyeRpTjD7uIDI.mft (raw, json) Hash identifier: HCJW/XWKn48KLs8V7JAS17Wq/TunowTKutd++K1ao/Y= Subject key identifier: CA:43:64:A5:60:E6:B8:BC:E4:E6:AA:42:5E:B2:99:69:E9:02:20:5B Authority key identifier: 64:83:D6:8C:40:B3:DB:C2:9A:7D:47:72:79:1A:53:8C:3E:EE:20:32 Certificate issuer: /CN=6483d68c40b3dbc29a7d4772791a538c3eee2032 Certificate serial: 019AF12E4B76B37AC3F9458B824ED0D14EFF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZIPWjECz28KafUdyeRpTjD7uIDI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/04535a-4c08-4dc9-97b1-dd4aff360a11/1/ZIPWjECz28KafUdyeRpTjD7uIDI.mft Manifest number: 12B0 Signing time: Sat 06 Dec 2025 01:02:14 +0000 Manifest this update: Sat 06 Dec 2025 01:02:14 +0000 Manifest next update: Sun 07 Dec 2025 01:02:14 +0000 Files and hashes: 1: ZIPWjECz28KafUdyeRpTjD7uIDI.crl (hash: +AcOEOI4UdDLFvK4wxvpH3ZVZkvB+Sy25fnSYw+aDik=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/04535a-4c08-4dc9-97b1-dd4aff360a11/1/ZIPWjECz28KafUdyeRpTjD7uIDI.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/04535a-4c08-4dc9-97b1-dd4aff360a11/1/ZIPWjECz28KafUdyeRpTjD7uIDI.mft rsync://rpki.ripe.net/repository/DEFAULT/ZIPWjECz28KafUdyeRpTjD7uIDI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:4b:76:b3:7a:c3:f9:45:8b:82:4e:d0:d1:4e:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6483d68c40b3dbc29a7d4772791a538c3eee2032 Validity Not Before: Dec 6 01:02:14 2025 GMT Not After : Dec 7 01:02:14 2025 GMT Subject: CN=ca4364a560e6b8bce4e6aa425eb29969e902205b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:d3:c0:97:0d:f8:d8:5f:66:c0:51:2a:42:ae: e1:81:30:6e:0e:c4:0d:36:ab:8d:63:97:36:79:88: 70:5b:96:c4:31:20:f7:e7:ef:04:e4:1d:c0:7c:ca: bf:07:8b:5a:d7:a0:54:02:5c:b8:14:92:7d:65:34: 1d:97:06:8d:c9:cc:8d:cd:11:ae:4b:07:6f:fc:f1: 12:8a:0b:8e:59:3f:90:25:ed:81:dc:4f:32:6a:0f: 9e:a6:b1:ab:e4:b2:b7:61:d7:55:e8:d7:f1:da:97: cb:4d:b4:9d:00:0b:51:a1:c0:58:da:ed:e6:a4:a3: 11:37:3f:3f:bf:7a:37:85:17:04:46:f8:80:3d:ef: fa:76:75:eb:1c:f3:93:1a:5d:3e:da:be:0c:6a:0a: 24:29:41:3f:3e:3f:72:a2:99:56:f1:d5:f4:85:33: 71:31:cb:46:2c:f8:6e:58:ad:7f:1f:bb:96:4a:34: f8:d5:20:97:1d:ff:e0:a0:a7:3f:9b:ba:3a:94:8e: 36:2f:7f:0b:af:a3:2d:01:1f:65:2b:08:f7:c5:2d: d2:e0:c2:6c:65:ac:da:88:76:99:80:46:50:95:ca: 49:37:21:32:a8:49:a6:b7:b6:d1:0c:8b:ba:8c:a5: f5:b9:fb:21:ac:f3:ec:e1:ca:2c:ed:ac:32:26:5e: 7f:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:43:64:A5:60:E6:B8:BC:E4:E6:AA:42:5E:B2:99:69:E9:02:20:5B X509v3 Authority Key Identifier: keyid:64:83:D6:8C:40:B3:DB:C2:9A:7D:47:72:79:1A:53:8C:3E:EE:20:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZIPWjECz28KafUdyeRpTjD7uIDI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/04535a-4c08-4dc9-97b1-dd4aff360a11/1/ZIPWjECz28KafUdyeRpTjD7uIDI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/04535a-4c08-4dc9-97b1-dd4aff360a11/1/ZIPWjECz28KafUdyeRpTjD7uIDI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:09:07:19:64:bd:68:2a:d6:1a:1b:62:59:ff:4a:39:32:38: a1:72:c5:21:b9:51:0a:6e:d7:89:db:8a:b0:96:79:fb:df:9f: fe:1c:cb:6d:f2:e6:3b:b4:3c:9a:48:e5:39:90:31:55:b8:53: 24:24:91:77:54:c7:79:91:c8:36:80:36:c8:16:3d:a6:bd:f1: 3a:d5:29:69:55:47:05:dd:8f:7c:3f:28:0a:3f:81:a0:e0:91: 92:3b:6c:fc:74:74:bc:cd:5c:31:7e:e2:a2:78:b1:23:4d:13: df:72:cf:e8:c4:73:7e:37:a4:1e:c1:57:ff:3b:91:d5:b0:0f: 70:d4:17:fc:36:ad:3c:f6:e8:2c:c0:70:6c:cf:93:5e:5b:fb: cb:f6:4e:db:b8:e3:96:eb:f5:8e:b8:21:e9:d1:d5:7d:c7:cd: 95:39:55:50:c4:07:a3:dc:1a:bd:f9:19:74:e9:c6:cf:44:95: 2f:11:6b:f7:e0:24:28:3e:42:58:c5:36:89:d6:04:93:b4:08: fe:c5:a2:98:71:7a:82:a7:2c:24:89:ac:af:80:63:9f:d0:64: 4d:74:15:43:4e:d6:e3:5d:77:0d:e4:e1:f2:5f:81:c2:cd:c1: 07:c2:8a:d0:39:b8:9a:4a:1c:42:4d:0b:d9:8a:2c:f8:1d:af: 46:48:73:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLkt2s3rD+UWLgk7Q0U7/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0ODNkNjhjNDBiM2RiYzI5YTdkNDc3Mjc5MWE1MzhjM2Vl ZTIwMzIwHhcNMjUxMjA2MDEwMjE0WhcNMjUxMjA3MDEwMjE0WjAzMTEwLwYDVQQD EyhjYTQzNjRhNTYwZTZiOGJjZTRlNmFhNDI1ZWIyOTk2OWU5MDIyMDViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA29PAlw342F9mwFEqQq7hgTBuDsQN NquNY5c2eYhwW5bEMSD35+8E5B3AfMq/B4ta16BUAly4FJJ9ZTQdlwaNycyNzRGu Swdv/PESiguOWT+QJe2B3E8yag+eprGr5LK3YddV6Nfx2pfLTbSdAAtRocBY2u3m pKMRNz8/v3o3hRcERviAPe/6dnXrHPOTGl0+2r4MagokKUE/Pj9yoplW8dX0hTNx MctGLPhuWK1/H7uWSjT41SCXHf/goKc/m7o6lI42L38Lr6MtAR9lKwj3xS3S4MJs ZazaiHaZgEZQlcpJNyEyqEmmt7bRDIu6jKX1ufshrPPs4cos7awyJl5/eQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMpDZKVg5ri85OaqQl6ymWnpAiBbMB8GA1UdIwQY MBaAFGSD1oxAs9vCmn1HcnkaU4w+7iAyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWklQV2pFQ3oyOEthZlVkeWVScFRqRDd1SURJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8wNDUzNWEtNGMwOC00ZGM5LTk3YjEt ZGQ0YWZmMzYwYTExLzEvWklQV2pFQ3oyOEthZlVkeWVScFRqRDd1SURJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy8wNDUzNWEtNGMwOC00ZGM5LTk3YjEtZGQ0YWZmMzYwYTEx LzEvWklQV2pFQ3oyOEthZlVkeWVScFRqRDd1SURJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJwkHGWS9 aCrWGhtiWf9KOTI4oXLFIblRCm7XiduKsJZ5+9+f/hzLbfLmO7Q8mkjlOZAxVbhT JCSRd1THeZHINoA2yBY9pr3xOtUpaVVHBd2PfD8oCj+BoOCRkjts/HR0vM1cMX7i onixI00T33LP6MRzfjekHsFX/zuR1bAPcNQX/DatPPboLMBwbM+TXlv7y/ZO27jj luv1jrgh6dHVfcfNlTlVUMQHo9wavfkZdOnGz0SVLxFr9+AkKD5CWMU2idYEk7QI /sWimHF6gqcsJImsr4Bjn9BkTXQVQ07W4113DeTh8l+Bws3BB8KK0Dm4mkocQk0L 2Yos+B2vRkhzDA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:10:40 2025 by rpki-client